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(57)Abstract: 

PROBLEM TO BE SOLVED: To provide a new system capable of supplying 
authentication information in a form which is inseparable from an image data. 
SOLUTION: An image is halved and authentication information to hide in one 
image is obtained from the other image itself. Objective image data photographed 
by a digital camera is divided into an area D1 for generating a hush value and an 
area D2 for hiding a hush value H. A digest-calculating part calculates H from 
data of D1 and ciphers it by a secret key different for each digital camera, etc., 
to hide D2, hiding can be executed by operating a pixel value in a real space or a 
frequency space to a degree of not being recognized visually. In D2, additional 
information such as a time stamp, positional information of GPS can be hidden 
before hiding data from D1. 
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* NOTICES * 

JPO and NCIPI are not responsible for any 
damages caused by the use of this translation. 

1. This document has been translated by computer. So the translation may not reflect the original 
precisely. 

2. **** shows the word which can not be translated. 
3.1n the drawings, any words are not translated. 



CLAIMS 



[Claim(s)] 

[Claim 1] By operating the data in a field division means to divide an image into the 1st image field and 
the 2nd image field, an authentication information generation means to generate authentication 
information from the data in said 1st image field, and said 2nd image field The system which hides into 
an image the authentication information characterized by having a field composition means to compound 
a hiding means to hide said authentication information all over said 2nd image field, and said 1st image 
field in said image and said 2nd image field in which said authentication information was hidden. 
[Claim 2] Said authentication information is a system according to claim 1 characterized by being the 
digest of the data in said 1st image field. 

[Claim 3] Said digest is a system according to claim 2 characterized by being the hash value of the data 
in said 1st image field. / 
[Claim 4] It is the system according to claim 1 which has further a code conversion means to encipher 
said authentication information, and is characterized by said hiding means hiding the enciphered 
authentication information concerned all over said 2nd image field. 

[Claim 5] A field specification means to pinpoint in an image the 1st image field and the 2nd image field 
in which information was hidden by operating data, An authentication information generation means to 
generate the 1st authentication information from the data in said 1st image field, The image 
authentication system characterized by having an extract means to extract the 2nd authentication 
information from said 2nd image field, and an authentication means to judge that said image is not 
changed when said 1st authentication information is in agreement with said 2nd authentication 
information. 

[Claim 6] Said authentication means is a system according to claim 6 characterized by judging that said 
image is changed when said 1st authentication information is not in agreement with said 2nd 
authentication information. 

[Claim 7] Said 1 st authentication information is a system according to claim 5 characterized by being 
the digest of the data in said 1st image field. 

[Claim 8] Said digest is a system according to claim 6 characterized by being the hash value of the data 
in said 1st image field. 

[Claim 9] It is the system according to claim 5 characterized by judging that said image is not changed 
when said 2nd authentication information is enciphered, and it has further a decode conversion means 
to decrypt said 2nd authentication information and the decrypted authentication information of said 
authentication means concerned corresponds with said 1st authentication information. 
[Claim 10] By operating the data in the step which divides an image into the 1st image field and the 2nd 
image field, the step which generates authentication information from the data in said 1st image field, 
and said 2nd image field How to hide into an image the authentication information characterized by 
having the step which compounds the step which hides said authentication information all over said 2nd 
image field, and said 1st image field in said image and said 2nd image field in which said authentication 
information was hidden. 

[Claim 1 1] The step which pinpoints in an image the 1st image field and the 2nd image field in which 
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information was hidden by operating data, The step which generates the 1st authentication information 
from the data in said 1st image field, It is the authentication approach about the identity of the image 
characterized by having the step which extracts the 2nd authentication information from said 2nd image 
field, and the step judged that said image is not changed when said 1st authentication information is in 
agreement with said 2nd authentication information. 

[Claim 12] By changing into an electrical signal the light inputted through optical system and said optical 
system The transducer which outputs the analog signal of an image, and a signal-processing means to 
generate the digital signal of an image according to said analog signal, A field division means to divide an 
image into the 1st image field and the 2nd image field according to said digital signal, By operating the 
data in an authentication information generation means to generate authentication information from the 
data in said 1st image field, a code conversion means to encipher said authentication information, and 
said 2nd image field The digital camera characterized by having a field composition means to compound 
a hiding means to hide the enciphered authentication information all over said 2nd image field, and said 
1st image field in said image and said 2nd image field in which said authentication information was hidden. 
[Claim 13] Said authentication information is a digital camera according to claim 12 characterized by 
being the hash value of the data in said 1st image field. 



[Translation done.] 
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precisely. 

2.**** shows the word which can not be translated. 
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DETAILED DESCRIPTION 



[Detailed Description of the Invention] 
[0001] 

[The field of the invention to which invention belongs] This invention relates to the system which hides 
the digest of an image, and relates to the digital camera which adds the authentication information on 
the image photoed especially to this image. 
[0002] 

[Description of the Prior Art] Recently, a digital camera is spreading quickly. A digital camera photos a 
scene etc. and saves it by making this into digital data at memory card etc. The reason of rapid spread 
of a digital camera has a more important thing in the point that the taken photograph can be saved as a 
digital image, although it is naturally in the fall of a body price, or its outstanding portability. By computer, 
according to liking of a user, the contents are processed easily, and digital data can carry out the thing 
of them, and can be easily circulated through a network etc. Therefore, it is expected that the need for 
a digital camera that such a digital image can be obtained easily becomes larger future still. 
[0003] On the other hand, since digital data is easy to alter composition etc. so that a trace may not 
remain, the dependability as a proof of the photoed digital image may pose a problem. Such a problem 
can pose a big problem in the photography in business, although it will seldom be generated if it is hobby 
photography extent by the general user. For example, it is the case where the digital image photoed 
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between the contract points through the network in using a digital camera as construction record of an 
construction work **** the ordering agency is transmitted and received. The digital image photoed in 
these cases can demonstrate the function as documentary photography only after it can attest the 
identity of the contents. Therefore, the expectation for the digital camera which can add the 
authentication information about the identity of the photoed digital image is great. 
[0004] Drawing 1 is the block diagram of the image-processing system of the conventional digital 
camera. The photoed object is changed into an electric analog signal by CCD12 through optical system 
1 1. This signal is processed by the signal-processing section 13, and is outputted as image data D which 
is a digital signal. This generated image data D is inputted into the digest count section 14. The digest 
count section 14 calculates hash value H of the data of the whole image. A hash value is a value (digest) 
which becomes settled in the meaning which shows the description of an image by the operation based 
on image data. Hash value H as a digest will become a different value if the contents of an image differ. 
The code transducer 15 enciphers hash value H using a private key SK, and outputs enciphered hash 
value H\ This enciphered hash value H' is authentication information, and this is attached in the form of 
another file with image data D. 

[0005] The following information is required in order for image data to judge whether it is the same as 

that of original image data, or image data is not altered, if it puts in another way. 

(1) Image data (2) authentication information (it attaches to image data as another file) 

(3) The public key PK corresponding to a private key SK (it receives separately from those who have 

authority) 

[0006] Those who detect an alteration calculate the hash value H1 of the image data which it is going to 
attest first. Next, a hash value H2 is specified from the authentication information in an attached file. 
Since it is what enciphered hash value H of the subject-copy image D with the private key SK (hash 
value H'), if this authentication information remains as it is, it cannot specify a hash value H2. Then, from 
the authority **** person who is keeping the public key PK corresponding to a private key SK, this 
public key PK comes to hand, and authentication information is decrypted based on this. And the 
obtained hash value H2 is compared with the calculated hash value H1. Both value must be in 
agreement if the image as a candidate for authentication is the same as the subject-copy image D. The 
hash value as a digest is because the values should differ if the contents of the image differ. Therefore, 
when a hash value is in agreement, identity is attested, and in differing, it judges it as what was altered. 
[0007] 

[Problem(s) to be Solved by the Invention] Thus, it attests on the assumption that, as for image data, 
authentication of the identity in a Prior art attaches authentication information independently and 
authentication information is attached at the time of verification. Therefore, when authentication 
information is missing, it cannot verify any longer. Therefore, the verification person had to pay careful 
attention to storage and management of authentication information. 

[0008] Then, the purpose of this invention is proposing the new method which can supply authentication 
information in a format really indivisible from image data. 

[0009] Moreover, another purpose of this invention is to enable verification of image data, without a 
verification person keeping authentication information. 

[0010] Furthermore, another purpose of this invention is hiding authentication information into an image, 

without degrading the image quality of image data. 

[0011] 

[Means for Solving the Problem] A field division means by which the 1st invention divides an image into 
the 1st image field and the 2nd image field in order to solve the above-mentioned technical problem, By 
operating the data in an authentication information generation means to generate authentication 
information from the data of the 1st image field, and the 2nd image field The system which hides the 
authentication information which has a field composition means to compound a hiding means to hide 
authentication information all over the 2nd image field, and the 1st image field in an image and the 2nd 
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image field in which authentication information was hidden in a way stage of an image is offered. 
[0012] A field specification means by which the 2nd invention pinpoints in an image the 1st image field 
and the 2nd image field in which information was hidden by operating data, An authentication information 
generation means to generate the 1st authentication information from the data in the 1st image field. It 
judges that the image is not changed when an extract means to extract the 2nd authentication 
information, and the 1st authentication information are in agreement with the 2nd authentication 
information from the 2nd image field, and in not being in agreement, it offers the image authentication 
system which has an authentication means to judge that the image is changed. 

[0013] The 3rd invention by operating the data in the step which divides an image into the 1st image 
field and the 2nd image field, the step which generates authentication information from the data in the 
1 st image field, and the 2nd image field The approach of hiding the authentication information which has 
the step which compounds the step which hides authentication information all over the 2nd image field, 
and the 1st image field in an image and the 2nd image field in which authentication information was 
hidden in a way stage of an image is offered. 

[0014] The step at which the 4th invention pinpoints in an image the 1st image field and the 2nd image 
field in which information was hidden by operating data, The step which generates the 1st authentication 
information from the data in the 1st image field, The authentication approach is offered for the identity 
of the image which has the step which extracts the 2nd authentication information from the 2nd image 
field, and the step judged that the image is not changed when the 1st authentication information is in 
agreement with the 2nd authentication information. 
[0015] 

[Function] With such a configuration, authentication information (the 2nd) is hidden all over the 2nd 
image field. (The 2nd) Authentication information is the information for attesting the identity of an image, 
and is a peculiar thing which changes with contents of the 1st image field. The 1st authentication 
information generated based on the changed data when the data in the 1st image field are changed 
serves as a value which hides all over the 2nd image field and is different from the authentication 
information on ********** 2nd. Therefore, the 2nd authentication information hidden all over the 2nd 
image field is extracted, and it is verifiable whether the image is changed or not, if it compares with the 
1st authentication information which newly generated it from the 1st image field. 
[0016] 

[Embodiment of the Invention] 

[Digital camera] drawing 2 is the block diagram of the image-processing system of the digital camera in 
this example. The photoed object is changed into an electric analog signal by CCD22 through optical 
system 21. This signal is processed by the image-processing section 27 which has the signal-processing 
section 23, the field division section 24, the hiding section 25, and the field composition section 26, is 
outputted as image data D' which is a digital signal, and is saved in the storage sections 28, such as 
memory card. Although this image data D' is not the completely same data as image data D since a hash 
value is hidden in the predetermined image field in image data D by the hiding section 25, it cannot 
recognize that difference visually. 

[0017] Image data D which is the output of the signal-processing section 23 can be carved into two 
fields by the field division section 24. Drawing 3 is a conceptual diagram for explaining division and 
composition of an image field. The image D as shown in this drawing (a) is divided into the image field D1 
which gives the input value for hash value generation, and the image field D2 which embeds generated 
hash value H (refer to this drawing (b)). In this example, it is possible for the image field D2 to consist of 
40x40 pixels at the lower right of an image, and to hide 160-bit information ideally. 
[0018] The image field D1 divided by the field division section 23 is inputted into the digest count 
section 29 as the authentication information generation section. The digest count section 29 calculates 
hash value H of the data of the image field D1 cut-off whole as authentication information. A hash value 
is a digest in which the description of an image is shown by the operation based on image data. A digest 



is an epitome which shows the description of image data, and hash value H as a digest reacts sensitively 
also to 1 -pixel modification of the contents of an image, and has the property to change to a completely 
different value. Therefore, it is possible that it is the numeric value which has natural image data and the 
relation of about 1 to 1 especially. 

[0019] Hash value H is specifically expressed by the following formulas. 
[Equation 1] 

H=H1 (d[0]//d[1]//d [2] //... //d [I]) 

[0020] Here, H1 is a Hash Function. Moreover, a operator "//" means that each element of a message 
array is connected. Moreover, d [i] shows each pixel value included all over the image field D1. The 
exclusive OR of the data which an array element has is sufficient as this concrete operation. However, 
when it considers as an exclusive OR, the sequence of a message array value is not reflected in a count 
result. For example, if the approach of CRC (Cyclic Redundancy Check) is used, this order relation can 
be reflected. This algorithm is one of the algorithms for calculating a checksum, and generates the 
output for which it depended in order of the contents of the data stream, and a data stream. 
[0021] This Hash Function H1 is a function with which cutting tool length asks for the output (hash 
value) of different cutting tool length K from it from the input (array value d [i]) which is Bm cutting tool. 
Since this function is a one-way function, it cannot presume x as a matter of fact from y in H(x) =y. A 
hash value is only used as initial value in the case of data hiding, and a different output to a different 
input should just carry out it being guaranteed as a matter of fact. Therefore, there is no special 
semantics in the value of a hash value itself. An important thing is that a hash value becomes settled 
uniquely based on the contents of whole outputting the value which shows the description of an array 
by the operation, i.e., an array element, and the value changes with contents of the whole array. 
[0022] The code transducer 30 enciphers hash value H using a private key SK, and outputs enciphered 
hash value H\ This enciphered hash value H' is authentication information. A private key SK is [0023] 
currently held inside the camera using a different key for every digital camera. Hash value H' enciphered 
as authentication information is sent to the hiding section 25 in the image-processing section 27. The 
hiding section 25 hides hash value H' all over the image field D2 by operating the data in [ D2 ] an image 
field. A hide lump can be carried out in real space or frequency space by operating the data in the image 
field D2 (for example, pixel value). Although embedding can consider various approaches, it mentions 
later about the example. In addition, this is explained to Japanese Patent Application No. No. (we 
reference number JA 996-044) 159330 [ eight to ], and Japanese Patent Application No. No. (we 
reference number JA 996-074) 272721 [ eight to ] at the detail. 

[0024] Since the data in the field are operated in order to hide hash value H' all over the image field D2, 
the image quality in the part is somewhat different from the subject-copy image. However, since most 
things for which such a difference is recognized visually are the impossible, visual degradation of image 
quality is not produced. 

[0025] The field composition section 26 compounds the image field D1 in a subject-copy image, and the 
image field D2 in which hash value H' was hidden (refer to drawing 3 (c)). And this compounded image 
data D' is saved in the storage section 28. 

[0026] Since the field which is not related to count of a digest and to embed is pinpointed, division of an 
image field is performed so that clearly from the above-mentioned explanation. Supposing it calculates 
the digest of the whole image and hides that result, without dividing an image field, it stops being in 
agreement with the original digest of this with which the new digest of the whole image after a lump is 
embedded by hiding. Therefore, identity of an image cannot be attested by such approach. Then, the 
image field in which a digest is hidden has guaranteed coincidence with the calculated digest and the 
digest hidden by not considering as the object of digest count. In such a viewpoint, it is good also 
considering the subject-copy image D which smeared away only the part of the image field D2 in 
monochrome, such as black and white, as an image field D1. In this case, the digest of the subject-copy 
image D with which the part was smeared away is calculated, and it is hidden in the image field D2. 
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Thereby, it can hide and coincidence of a digest can be guaranteed after a lump. 

[0027] In addition, the digital camera in this example may hide the additional information of the positional 
information measured by time stamps, such as ID of a photography camera, and a date of photography, 
and GPS all over the image field D1. In this case, it is important to hide additional information all over 
the image field D1, to be ****** and to hide hash value H* of that result in the image field D2 after that 
first. It is because a hash value is different, so authentication of identity becomes impossible by hide it 
of subsequent additional information when hash value H' of the image before embedding additional 
information is hidden in the image field D2. 

[0028] In addition, it is not necessary to concentrate on one place like the above-mentioned example, 
and the image field D2 may be dispersedly made to exist using a location sequence generation algorithm, 
and a part of Low Bit may be used for it. 

[0029] The system which performs identity authentication of the image photoed with the digital camera 
is explained using a [image authentication system], next the hidden authentication information. Those 
who are going to verify identity need to have the following information. Since authentication information 
is hidden in the really indivisible condition into an image, please care about the point which does not 
need to be kept in the form of another file. 

(1) The public key PK corresponding to the image data M'(2) private key SK (it receives separately from 
those who have authority) 

[0030] Drawing 4 is the block diagram of the identity authentication system of the image in this example. 
The field specification section 41 pinpoints the image field D1 and the image field D2 in image D' in 
which hash value H' is hidden. The image field D1 is a field which gives the data for generating a hash 
value, and the image field D2 is a field in which hash value H' as above-mentioned authentication 
information is hidden. 

[0031] The digest count section 42 newly calculates a hash value based on the data in the image field 
D1. Moreover, the digest extract section 43 extracts enciphered hash value H' which is hidden as 
authentication information from the image field D2. The concrete extract approach is later mentioned 
with the concrete approach of embedding. 

[0032] The decode transducer 44 decodes extracted hash value H' using a public key PK. This public 
key PK is an available key which becomes settled uniquely corresponding to a private key SK, and needs 
to come to hand from the authority **** person who is keeping this. 

[0033] In the authentication section 45, identity is attested by comparing the hash value based on the 
data in the image field D1 newly calculated by the digest count section 42 with hash value H' obtained 
by the decode transducer 44. That is, when a hash value is in agreement, it is judged that the image is 
not altered. Moreover, when a hash value is not in agreement, it is judged that the image is altered. That 
the case where a hash value is not in agreement arises is the case where it corresponds to at least the 
following two one side. 

(1) Since the hash value which newly re-**(ed) from the image field D1 changes when the image field D1 
is altered, stop being in agreement with hash value H hidden all over the image field D2. 

(2) Since hash value H hidden in the image field D2 changes when the image field D2 is altered, stop 
being in agreement with the hash value which re-**(ed) from the image field D1. 

[0034] Since according to this example authentication information unifies in an image and is hidden by 
using a data hiding technique, it is not necessary to attach authentication information to image data as 
another file. Therefore, it is verifiable even if the verification person does not hold especially 
authentication information. 

[0035] Moreover, since authentication information is enciphered using the public key cryptosystem 
(scramble), rewriting of the authentication information by the holder in bad faith can be made impossible 
as a matter of fact. Furthermore, a certain public key PK is equivalent to only one private key SK. 
Therefore, the digital image of a private key SK is possible also for attesting with which digital camera a 
photograph was taken by making it different for every digital camera. 
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[0036] In addition, in order to open a digital camera and to oppose unjust access to the maintenance 
information inside a body, it is effective to use devices, such as a tamper-proof module used with the 
cellular phone etc. It is regarded as that to which the theft of the private key SK was carried out when 
such unlawful access was performed, and about the image data based on the private key SK, even when 
a digest is in agreement, a thing judging is altered and carried out. By doing in this way, the damage by a 
third person's unjust action is avoidable. 

[0037] In addition, although the above-mentioned example explained the digital camera, as for this 
invention, it is natural that it is not limited to this and can use for digital systems, such as a digital video, 
widely. 
[0038] 

[Example] Here, pixel block coding (Pixel Block Coding) (henceforth PBC) which is an example of an 
approach which extracts the approach of embedding the data set as the object of a concealment into a 
certain media data of a certain and the data embedded conversely is explained. When PBC is used, 
hiding and an extract are processed according to a certain following transformation rules which are 
expressed in data. 

[0039] [Basic algorithm] Generally primary properties, such as a pixel value of two pixels which adjoined, 
have the high correlation mutually. Therefore, even if it puts in and changes a pixel value, an image does 
not produce degradation of extent which can be recognized visually. In view of this property, this 
algorithm defines the image field which has at least one pixel as a pixel block, is replacing the 
characteristic value of the pixel block which adjoined intentionally based on a certain transformation rule, 
and conceals 1-bit data. That is, data are expressed by exchange of the characteristic value of an 
adjoining pixel block. Moreover, at the time of the extract of data, data are extracted according to the 
extract regulation determined based on these transformation rule. 

[0040] Bit information replaces the characteristic value (for example, brightness value) of two adjoining 
pixel blocks according to the following transformation rules, and a thing expression is carried out. 
[0041] bit-on <1> : case the characteristic value of one pixel block (PB1) is larger than the 
characteristic value of another side (PB2) — bit - off <0> : [case the characteristic value of one pixel 
block (PB1) is smaller than the characteristic value of another side (PB2) — 0042] Moreover, bit 
information is extracted by comparing the characteristic value (for example, brightness value) of two 
adjoining pixel blocks according to the following extract regulations. 

[0043] case the characteristic value of one pixel block (PB1) is larger than the characteristic value of 
another side (PB2) — :bit~on case the characteristic value of <1> one pixel block (PB1) is smaller than 
the characteristic value of another side (PB2) — :bit - off <0 [0044]> Drawing 5 is drawing for explaining 
hiding of data and the extract which used PBC. It is also possible to define the pixel blocks PB1 and 
PB2 as a set of two or more pixels like 3x3 pixels, and to define 1 pixel as a 1 -pixel block. Since the 
adjoining pixel block has high correlation, even if it replaces those locations, it is not sensed that the 
image deteriorated in extent which can be recognized visually ( drawing 5 (a)). 
[0045] The case where the location of the pixel block in an original image is this drawing (b) is 
considered. First, the characteristic value of two pixel blocks is compared, consequently the direction of 
the characteristic value of PB1 presupposes that it is larger than the characteristic value of PB2. Since 
the conditions of data "data [ in / when concealing 1" / in the characteristic value of a pixel block / 
transformation rule ]" 1" are already fulfilled originally, there is no exchange line crack of the 
characteristic value of these blocks. Since the extract regulation has determined that it is data "1" 
when the characteristic value of PB1 is large in case data are extracted, data"l" is extracted. 
[0046] on the other hand — original — data — " — zero — " — concealing — a case — original — it 
can set — a pixel - a block — a characteristic value — relation — transformation rule — it can set — 
data — " — zero — " — conditions — not filling — since — the characteristic value of a pixel block - 
- changing . However, this exchange cannot be recognized visually. At the time of an extract, data"0" is 
extracted from the relation of the characteristic value of these blocks according to an extract regulation. 
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[0047] Thus, a number sufficient in PBC to conceal the information set as the object of a concealment 
of pixel blocks are chosen from images. And the train of this pair is generated by making the pair of the 
pixel block which adjoins a pixel block and it of selected 1. And the bit which serves as a candidate for a 
concealment one by one from the head of a train is concealed. 

[0048] This train may be matched with the condition sequence S in the 1st example. For example, a 
pixel block is matched with the array element M of the media array M in the 1st example. A pair is made 
from the media array value which adjoins each array element (status value Sj) of a condition sequence 
and it which were serially generated by the target in the hiding activity. And, of course, it is also possible 
to determine again based on the pseudo-random number sequence it is [ a pseudo-random number 
sequence ] possible to perform the above-mentioned processing to this pair and which is generated 
from the kind (seed) of a certain random number. 

[0049] At the time of an extract, the same block train as the time of hiding is scanned. The whole 
message is extracted by collecting [ 1-bit ] at a time whether each pair expresses bit-on or OFF is 
expressed according to an extract regulation. Supposing the characteristic value of the pixel block which 
is a pair is the same, the pair will be skipped like the time of hiding. If a block train or its train generation 
method is made secret, the concealed information can be hidden from others. 

[0050] In addition, as for an embedding location, in PBC, it is desirable to determine in view of image 
quality and extract precision. That is, when the difference of the characteristic value of the pixel block 
which constitutes the pair used as an embedding object is not much large, there is a possibility that 
image quality may deteriorate by exchange actuation. In order to control degradation of such image 
quality, it is desirable to establish the 1st threshold (upper limit), and to make it not embed a bit in the 
pair, if the difference of a characteristic value is beyond the threshold. 

[0051] Moreover, although degradation of the image quality by exchange actuation will hardly be 
produced if the difference of a characteristic value is small, size relation is conversely reversed under 
the effect of a noise, and there is a possibility that the bit embedded at the time of an extract cannot be 
extracted. Therefore, in order to control the fall of extract precision, it is desirable to establish the 2nd 
threshold (minimum), and to make it not embed a bit in the pair, if the difference of a characteristic 
value is below the threshold. 

[0052] It skips without operating anything in the pair applicable to these cases. And the bit information 
which should be concealed is postponed and it conceals for the following pair. 

[0053] As a [characteristic value of block] characteristic value, things can be carried out using the value 
about the primary property of a pixel block, and the value about a secondary property. A primary 
property is the direct parameter of a pixel value like the brightness of a pixel block, or a chromaticity. 
Moreover, a secondary property is acquired by decomposing primary ****** like the value which shows 
the average of said parameter, and the statistical property of distribution. Furthermore, a characteristic 
value is good also as the result of an operation of the array which consists of two or more pixel values, 
and a predetermined array (mask), and can also be considered as the specific element value obtained by 
performing frequency conversion. Generally, the primary property has the high correlation in two 
adjoining pixel blocks. On the other hand, a secondary property may have a high correlation in two 
blocks not adjoining and which separated. Therefore, the pixel block set as the object of pBC should 
care about the point which is not limited to the block which not necessarily adjoins. 
[0054] 

[Effect] Thus, since authentication information is supplied in a format really indivisible from image data, 
i.e., the format hidden into the image, according to this invention, a verification person does not 
independently need to keep authentication information. Even if it performs a hide lump of such 
authentication information, image quality of image data is not degraded. 
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* NOTICES * 

JPO and NCIPI are not responsible for any 
damages caused by the use. of this translation. 

1. This document has been translated by computer. So the translation may not reflect the original 
precisely. 

2. **** shows the word which can not be translated. 
3.1n the drawings, any words are not translated. 



DESCRIPTION OF DRAWINGS 



[Brief Description of the Drawings] 

[Drawing 1] It is the block diagram of the image-processing system of the conventional digital camera. 
[Drawing 2] It is the block diagram of the image-processing system of the digital camera in this example. 
[Drawing 3] It is the block diagram of the identity authentication system of the image in this example. 
[Drawing 4] It is the block diagram of the identity authentication system of the image in this example. 
[Drawing 5] It is drawing for explaining hiding of the data using PBC, and an extract. 
[Description of Notations] 

21 ... Optical system 

22 ... CCD 

23 ... Signal-processing section 

24 ... Field division section 

25 ... Hiding section 

26 ... Field composition section 

27 ... Image-processing section 

28 ... Storage section 

29 ... Digest count section 

30 ... Code transducer 
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(57) («eje*) " 

[SIS] fi!*©!!*^©^-*^ >^*6ttjKSE^. ' 

trBSEtff* t> ©fr Sft.SJ: 5 1 if * . 

A7->atH6B L tTM« D 2 <t tC »ff £ ft £ f'H. ' ' 
yi^ httJMBttD 1 ©x-^e>H£H-#U fy^. 

^It^TiS. D2k«. D 1 ^£©x-^©RiL&' 
*©fltlfc. ^fA • >7*>G PS C»o 




(o) 



. . ... (2) 

1 

m&mii mi<Dwmmmt, *m2(Dwmm®t\zw 
»&ftti-t&m*i&*i¥8Lt. mesh i ffliiiisto 

EI8 2©B(*lKtf*©7 i -*£»fFr*::i:K:,fcD, ftl 

>^at, mmmiz&ttzmmwiicDWMmmtm 
ebbe*«**» L&snfcijEffi 2 <Dmm^t 
t % ffl«^s t. * t -5 ^ t £ w at t -r 5 bhi* #s 

[»#«2] fltEBEflHitt, gftEft 1 ©BitiSWc'} 3 © 

Jc:fBtfc©:>7.xA. 

3 ] ffiE^-f yiX h tt, ffiEft 1 ©Btt&tt 

2KEtS©->XxA. . 

Bffi«**fl&E*S 2 ©B*«tt+ic»b&tr 

tf-5>IB*ai CE*©->*xA. 20 

K«t;.0««^IBUa**lfc* 2 t*ll{|l*K 

st, «ii3* i 2©(iiifc***»6, / SB2©Bii«*siam 
f stttu^a t, ttE£ 1 ©&fftt fg^sfrEfg 2 ©fg«E 
i -aT& * p K • mebhwsx znx^tt^t 

■>'7r^. ... 

[ffl#5!6] ffiBSBB^att,' ffiE* 1 ©BBWaW*^ , so 

iBjg 2 .<DigiiEif $s t -a l & a, mtmmtf& 
7 ] fitness 1 ©B&i*$t2, h5ib^.i owmrn 

[W#3!8] WfB^-I'vxX htt, «t£$ 1 ©Bftfttt 

6 (CtBK©;>7.xA. 

[»3jBB9j mE^2«DBK**ttlit^fllS,nT*0,. 

mess 2 oBjffiflMB.stt^-r *a^SE*^as s & t 

#U "ftlEBE#a«, a««#ft:SnfcBSE« 

wjm&e* i©bb«*£ ft, "fi&EB«*« 

tfBtE<D->7.^A„ 

[M*aio] iioiiMt, w,2(Dwmmi$.t\z 

-^*^iSUtf$S?r^fi£-r-57.7 i ^7 f i, MEfi!2©lS 
«^H*4'O7 f -^*»fp-r*Ctt«J:0, fi&EBfi1Sf« 
^Sf[|3^2(Dia^ffl«t>^^Uaty7.5 i -y7 P i: ! ffiEB 
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*nfcWE*2<0H««*tS^j«-r*^7 1 'y7 r i**' 

Ci^TftStWf*^t, MESftl©Hiiffi*£4'© 
x-***5*'l©BB*«££J5£'frS;*7 L v:/£, WE 
JB2©B****>&/£2©BE*S*ttttrt"*XT':y 
:/<?:, fiQESB 1 ©BBW*#fi9EJ6 2 ©BEfiHR<!:-» 

t- y SWT* d t SB«©H— ttSBE 

[M$£l 2] ft^t, 8&E3fc**&fl-UTA;&Sn 

ft^ *m *;t<5 ^t&g§, t . . m%^7.± izmg-r, ■ 

«"2?4W««I3J&C-T, 1I*0WMMK&<- SI 2 ' 

•©H««tf£fc#«T*»«#a#R4:. ituEfl 1 ©a 
lft«**©x-:*;fcSBBW«&£j*^*Bffitt«±fifc 

fat, s9EBii««&BiF^b-r*i«#3B*fai; m 
^{banfcBK«**ifE»2|bB*««'t , »cis-uiiO 

/Wr-oyfat, HutBiS#t'43^-5BuEBl©Bj^ 
' ®« £gftEBffflt$Bft*IS L'ii jnfe'WEm 2 ©iii^m^ 

t*^fiK-r4**^»**ats*-r«-c:tfe«f*t'rs 

[W*«l 3] MBBBffiWfftt,' ffiESBl ©■«««* 
© x - ^ © A ^ -> a «i T? * <5 Ji & * i' "3" * l 
izKEit©^^;!''.*^^. 

[0 0 0 1] . ■ 

BiEfli**j:©B*fcWHi-r*'^^;i' • t>^v\zm-r 

-5). 1 ' • . ■ 

[0 0 0 2] 

[fi!*©Srj] *ifi, ;t-/?1 

4(1, *#«»(iDftT^o*nfc«f ttl:*5 c itt 
^^;UB*tbT«#T?**At»4. xv 5 ^^ ■ x- 

tt^3'^B**fB*fc»*J:t* t T*S-r> ? ^^ ■ * 
>5©^fitttt, ^•»£f$"r*£<£*t>©£»!t*3 
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3 

[0 0 0 3] ^(D—JjX', =r-J9)\/ • MWifi 

s e. is. ^j: o \z.^mz <*? oac^sff o 1 1 &®%t°$> 
5 3 afi. t: * k * » * »bt »i* * & hb i & o m 

JMB*© K-tt KMT* BBEW« £ ttflOT * * ^ 
[0 0 0 4] @1B, '^(Dy'iSPJl • ft*7<Dm&M 
l£^LT, CCD12II<t0i»7tP^!: 

Sl4CA*Sn5. y-f 5^x^MH|C»l 4«, gift! 

Tag. D , ^nteiSlgix-^ d t 7 7-1 frOMTmtf 
[000 5] m&?-5>rf7i-wi-)i<Dm& : r—'$'tm 

(1) H»x-* 

(2) BiE1ff$B (SJ^r-f^tUTHflkx-^^Sf*) 

(3) »«*SKH#fcLfc4MM8PK (*K£^-f<5> 

[0 0 0 6] BSc^SlftHir*#tt, S1"8BaEUJ:3t 

7 r -f ^ * ©BSEti? *gd*S> A >y -> i ffl H 2 ?rr 3 . 
:CBttI«ti, KCHttD ©A y ->a«H S K 

CtDBt^tL^feOD (Ayvo-ffiH' ) &©T, -?"© 

t^T, BKW*«:«^{fc;-ra. ^LT, ftbtlfcA-yv- 
*tUTOHIIl**SH«DtH— T?»ntf, M*©ffite 



(3) 

</ 

«, ra-tt*BKU, ft'*t*«^Jctt, &^sn&t> 

©£¥iJ$rT5<> 
[0 0 0 7] 

WK;feW-*H-tt©BIEtt, Hft^-^ittSUKBffiW 

[0 0 0 8] #589!©BWtt, BSEfiH§£iS{* 

[0 0 0 9] #ISW©SiJ©B«J«:, tt&E^tfBff 

1f?S£ffi« : T£-i&<, ■«5 f -*©*MiE£?J«l;:-r 

[0 0 10] *9£W<Dffl(D3&)\-t, WgasT-Z 

[0011] 

'fl»:fe«-*JBlOH«l«*tBaE«*^HbiiSnfcSB 

2 0H««*t*^-r««*^#ats:^r-r*Bi£ 

[0 0 1 2] JB2©»Wi, JBlOH««*t, x-^ 

H«Ma«t©'5 i -^^6!S 1 «Z)B8E««**fefi!t-raBffi 
tiHB£fi£#R£, *2©H*««A»5, »2©B8EWft 

^ifttBT-SfflUl^Si, % 1 OBSEtt 2 ©BiElff 

■r*BK^»££*T*H«BfflE5';*7 L A&ffi#-rs. 

40 [0 0 1 3] fg 3 ©fgBJlte, ^lfflliWi, ^2© 

w^oT-^^sBiEttfas^-raxT-y^t. ^2 

CDH^^cfCDx-^^^t" S^ifCckD, B8Et»$g 
4»2©B*fi*' : t»CIBbatJX7 i y7 r i:, H«K*tt 
*J810H««*tBIE*«*<BbasnfcJB2©ia« 

ffWis^ra^T-yyts^r-rsBinaffiisHifto 

[0 0 1 4] JB4 038Wtt, *l©B«1B«t, x-^ 

s»f^"r*^tt«ko««*»»uii*nfc»2oBiftifi 
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(4) 

5 

fi« 4> © x - * 6 SB 1 © BSIEffi fS ZZLtfL-tZTsTyf 
t, SB2©Htt«4tft>€>, »2©BIEW«S:»ttl"rSX 

y-yzft, ssi©Biiffi«#SB2©BiEW«£--srrs 

z m t z> m & © ra - tt * m e^s * & & -r a . 

[0 0 15] 

[{tffl ] ^©.t 5 (» 2 ©> BSEWffi^ js 

2©ia^ffi«4 ] {CKSL3A^n?). (SB 2©) 

it, H*©H— te*BE"3"4fc*©fiHR"e*0. SSI© 

iS«ffi«©fi^KJ;oTg&&B*&&©T"$>-5. t> io 

U SBlWBfcfctfrtCx-^Sfcgattfc*^. 

snfcx-i?ca^€r**sn4Sgi©BE««tt. m 

2 © H * IC n L iA £ T H SB 2 ©ISfiE t t£& 
fc*ifid:£*. tot, SB 2 ©■<*«** KB LiiS ft 
&SB2©BSEffif«*i*HiU ^-n^ss 1 ©■««#*>& 
3Bffcc*j«LfcSB i ©bew« tttgrtntt, m*tfi& 

[0 0 16] 
[%BJ©*S6©^ffi] 

)tfI2 1^LT, CCD2 2tC«fcDmm 

u— • *- h*^©teitgK2 8 tfissn*. ^©jii^x 

— *D' «, A-fx-f >^BB2 5 tit), Wm'T-itD 
ff©Blf*©BI«««k:Ay->a«*«BUii*nTl»*fc 

[0 0 17] fi^5Q.Sg|52 3©tti^TS-5>H#7 : -^D 
tt, ®«»fiJg|5 2 4tCj:0, 2 :?©»*£«) 6 ft 

■5. ^3tt, ■«fB*©»«R^J**Bi"W'r*fc*© 
M^HT'^-So PIE (a) ©ct^J^iS^DH, J\yi/z. 
fit © fc * © A * fit £ 5- -5 ia ft M *S D 1 1 £ fiE s ft 

tz a y ffiH &mtb&tswmm%.'D 2 1 $ 

(b) #88) . sMIffiWr&I^T, H^ffi«E>2 

tt@i»©*T©4 ox4 oia^T'«fi!c$n, gsw^ra 

1 6 0 t*y h©ra#B£BL3&tT£t#'5JtgT«&£. "0 

[0018] «««-id«2 3ic«fc»3 4j-«ianfcH««« 

Ditt, BEfflKB£j£ffi£ LT©^W -/iX MUMS 2 
9tCA*>£ft3o ^yiXMtIS52 9(i, t2JDJfc«E> 
ftfclHfc»«D 1 £#©X- 9 © A y -> a. ttH &B£fflF 

fc*ISlCJ:01l«©*«**-ry-1'^x^hT»5. 
-fyxXhiB, ■•5 f -3'©»a**-rfi»T*0, 
^-f y'lX h t LT©A^->aMH«, li»rt^©— iB 
^©glEfcWLTfctRJBfcEfcU £<SfcSffifcSEfc 



S«l*H©M«t:»*»llT**a:3titS^i*<T* 

-5. 

[0 0 19] A7->itHli, A#WKtt£ilT©iCT* 

3i£ft<s>„ 
[»13 

H=H1 (d [0]//d [l]//d [2]//- • -//dtl]) 
[0020] h l «A>y>-iMi5:T^a„ * 

fc. itff^ r//j JJ. *y-fe-5?E5i|©*g*«::Pfctf 

d [i] tt. HfliSHUDiffc: 
**ft-&*H3lMi&jSUTH*. ;:©&fc«fci&JfW:. 

iayij!i5if*«wr*5 f -3'©#to»»a?mf*>«t 
Hffl©JHjmttJM&*£Ei»aftfc^. crc 

(Cyclic Redundancy Check) £i^5;£i££ffl^ftfcf> £ 
©«#»«*£«*■*■ -5 '©TJUrf'JXA 
«, , ^x-y^-y-^?rftS-rafc*©7;P3*'JXA©— 
OT% t*— ^©rtg&tf^-^WWfcJJsiCtt^bfctti 

[0 0 2 1 ] Cffl^yi/aBRHltt. /HhWB, 
;HhT?*4A* (BBWftd [i]) {c*tbT. *ntJl 

*. c:©H»»4— H(x)=yK:*^ 

v>iffl«. 5^-37 •/W5 s ^>^©IBf**KSI»8lti 

Ay •>3.ffl©ffie*fctt«r»JJ&it*tta:t». 

t, OS9KMg*£#©rt*fcX^TAy->iffitf« 

[0 0 2 2] Ht^XtAffi3 0«, Ay>3.ffiH*»«tt 

ajft-rs.. cortp^ftsnfcAys/affiH' ^issEWfs 
[0023] BEfi?fatbTB»^{fcanfcAy>'3.ia 

H' ti, ®#®Sg|5 2 7t©A-fr^ > If to 2 5 (cMe> 
n*. A^5 :: 'C>^!f|52 5tt, H«««*D 2 ©^-5' 
*»frr*Ct»C«tO, Ay->a«H' 2:jl#««D2 

v»t, h#®«d 2 4 i ©'7 :; -^ mx-tewmm) 

*. tt*. cnKHUTtt, »BI¥8 - 1 5 9 3 3 0^- 

(^^fiSS^ JA996-044) RTf^m¥ 8-2 
7 2 7 2 H§ (SSIIS^J A 9 9 6 - 0 7 4) \Z>b 

[0 0 2 4] U^^D 2 't , l-«, /N-yvufflH' £&i 
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£tte£A>£*pjflB&©T, BK©«*Wfc*fc«£U 

[0 0 2 5] 2 6 «, f(Hil:4 , ©B«!ffiJSD 

ltA7'>ilH' *««ba*nfcH«**D2i:*^J« 
r-5 (El 3 (c) #flg) , t.LT, ^O-g-fig^nfcH^ 
X-^D' &BBtt« 2 8 

[0 0 2 6] ±BE©KiJH*>&91&j5»fcJ:3K:. Bttfett 

■S-TK, iiifto^-fyiX h^ff-jfbT, ■?•©££ 

yj^-fyi^ Hi, ffl»e>&f;ftT<AS7C«)y'f v'xT. 
h£:-g:b&<&5. t£oT, ~©<fc5&:Si£T'te, IS 
fti©l^-tt©ISJE£fT5 £i^T#&t^. -€-311?, ^-f 
yi7 h£Kib&ifBfgt1S«te, ^-f yi7 hitff©** 

jA £ nt t> -5 ^ x 7. h <t ©— St £ ffiSE L T ^ -5 © T 

l*£JR-*e«©flifeTB 0 -3^bfcJSB«D £B<§iSt*£ 
Di<hbTfc<fc^. £©*£■, — SP*^Dt3^SnfcM 
H^DOTy-f v'xX hSrtfff LT, J E-n£H^iS«D2 

xt. ho- shirrs ^tai-e^*. 
[0027] uis, *mmm\z&wz> ; fi?s>)i • x*? 
«, ti^^^^wiD, »iJ©B#^©*-r a • 
7*. gps Tate $ nsfiiti t»^> fttttamm&w 

\t. sr. Bfc«*Di*fcttin«*&»bi&^A>-r, 
if£, *©«©ttiaW«©Hb&*K:«i:B, A7'>3i 

[0 0 2 8] &£, B&ffittD2tt. ±Ba©HJfi«©«t 

;U3'UXA£m>T#ffcbT##£^T&J;^b, Low 

[0 0 2 9] [H#^-iE->7.xA] RiUJA^rifc 
BEfSSl^t, xy^JI' • #*9TSH&;£n;fcBfli 
©|W1— tt^aESrfT^vXxAtCP^Ti^B^-r-g). [e] — It 
£&SELJ;5 fr<&#tt, '&T©fflNB£#bTlr>5&SI 

(1) B#x~*M' 

(2) ffc»«SKK#J6L£&H«.PK (MR£*rrS 



(5) 

<? 

[0 0 3 0] @4ii, *^llfiWic*tt*iB#©ra-ttlg 
B^fA©^n«>JBT*5. SfcfifSSM 1 tt, A 
y/ilH' jWaL&SttT^SBfcD' iC&t^T, il 

lit, A y^afltS^rit-rSfca©?*-*' 

T*2o D, PiW£ttD2tt, ±SE©KE««i:bT©Ay 

[0 0 3 1 ] ^-fyxX hfMHB4 2tt, BttfflRDi 

io y-fJ?x^httm«4 3tt, H«<B«D2*»&, 

BSEfflttB i b TBI b & S tlT C-a 5 96 *Ht S tlfey \ -7 -> a 

[0032] «^M4 4H, Mai-£ntz;\y->3.m 

H' £, ^MlPKSffl^Tg^tS. :®«PK 

[0 0 3 31 BKS4 5TB, df-f * h tUMB4 2 
20 K«t •5jPrfcKtHfSnfcB«1B«Di»t»©7 f -^tS'^ 
^feAyyalt, «^***4 4(C«t D»&nfcAy 

>y -> iffi**— St b& ^ b S © HWT© 2 tJ © 

(1) wmmw.Diw&.-g/u-znx^zm'S 

30 T, H^ffi«D2 c t 1 tCKIb3ASn^:;N-> VittHt-g{ 
bfc<&£„ 

(2) B««*D2*«3k^SnTt»*»^ 
B«fi*D2k:BiUii*n/tAy->3.«H**3Eto*© 

r-, mmmmv \ & <b nm b it a -> ^ « t — st b ^ < 

[0 0 3 4] *mS^J{r«ttltf, x-^ • A-f >^ 

7<ii'tnMt§M^K tot, ismmifi& 

[0 0 3 5] 4>B«llS#*iCSffl^T, tSEflltt 

S«F^ft (7.^7>y;U) bT^§©T', jRK©IB=* 
tCj;?>igiHf$6©»#^^^*jl±?F'5I^CT-5>3:t^ 

lAiffflfy^il' • #*5TaHB3nfc©j&»fcWE"r * 
so [0 0 3 6] ^cti, xv 5 ^^ • *^7*M^bT2(£(*:rt 
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iE7?-txtffttefttzm&, mmm s n&: t> 

t>©flJ5£-f 3- Z\(D&?lZ-?Z>Z.fV, S§H#©^FIE& 

[0037] ±tmmmz, ^twjv ■ * * ? \z 
-D^xmrnvTztf, ^wizznizf&mznzhcDT'fc \o 

[0 0 3 8] 

ny^ • 3—7^ >^ (Pixel Block Coding) OWT. P 
BCtH5) PBC^fflW:!^, 
f-^^Wr-f >^StXfl6l±l«. J£TF©>z!!^£=fc5ft 

[0 0 3 9] [1*7^UXA] -flSWC $M*L;fc 

wmmnm \zmm-vz sisc^itBi - © 
u $>z>&m®.M\zm-32Mmmzmmvfzn' z^di • 

7uy?<D¥f&m&AftWXZ>ZLtT\ 1 t'7 h©f- 

fc. x-^wttttj^icis, z.<D^&Mmizg;-3gmi£.z 

[0 0 4 0] h*-yh1ff#S«, m&Lrz2-D(D\z°?-t)\s • 

[0 0 4 1 ] \f.y h • :*> <1>: — ^(TDtf^-fe;!/ • 7 
(PBi) ©#tttt*«te# (PB2) ©Wttffi<fcD 

k'7 h • ^7 <0>: — *©tf^-t;i/ • -7Uytr (P 
Bj) «o«Fttffi*«te*' (PB 2 ) ©fttttfiO/MSH*^ « 
[0 0 4 2] *&, f<y h«««, .&T©*6Wfflfl!Hc«£ 

[0 0 4 3] — ^CDtf^-t^ -ZfUy? (PB\) ©4# 
tttttfttl* (PB 2 ) ©«rtt«[«fc0*#^»^ : t*-> h 
• <1> 

—J5<D\£9iz)l" -Jnyir (PB[) OWttfil**tt* 
(PB2) O«rttlSJ:0/hS^»^: K- *7 <0> 
[0 044] 0511 PBC^ffl^fef-i'CMf^ 



/0 

U'^PBi, PB2«^J^.«3 x 3iS^0ct51r^co 
liOl^tLTgiLTbi^L. 1 HsH£ 1 tf^-fe 

^ • 7nyytfemrz>zt^mx°$>z,o »«-r*tr 

s 8Sfc*ft t & t ha i; § z. t aa t»f*5 5 (0 5 
(a) ) . 
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